From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:57535) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aIWTR-00039h-L9 for qemu-devel@nongnu.org; Mon, 11 Jan 2016 02:01:06 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aIWTO-0003XC-FF for qemu-devel@nongnu.org; Mon, 11 Jan 2016 02:01:05 -0500 Received: from mx1.redhat.com ([209.132.183.28]:46367) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aIWTO-0003W3-9r for qemu-devel@nongnu.org; Mon, 11 Jan 2016 02:01:02 -0500 Date: Mon, 11 Jan 2016 12:30:50 +0530 (IST) From: P J P In-Reply-To: <56920EC7.6090109@msgid.tls.msk.ru> Message-ID: References: <20160108091949.GA14724@olga> <20160108130251.GA17847@olga> <20160108143831.GA7632@olga> <1907860725.4.388b58e8-5b06-4844-be0c-df2778eb46fb.open-xchange@webmail.proxmox.com> <56920EC7.6090109@msgid.tls.msk.ru> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Subject: Re: [Qemu-devel] [PATCH] hmp: avoid redundant null termination of buffer List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Michael Tokarev Cc: Wolfgang Bumiller , qemu-devel@nongnu.org, Ling Liu Hello, +-- On Sun, 10 Jan 2016, Michael Tokarev wrote --+ | So, what's the status of this issue now? | (it is CVE-2015-8619 btw, maybe worth to mention this in the commit message) Yes, if the patch is not yet merged upstream, it'd be good to include this CVE in the commit message. -- Prasad J Pandit / Red Hat Product Security Team 47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F